Kubernetes基础:Secret

来自AI助手的总结
Kubernetes中通过Secret加密存储并在Pod中引用账号密码
Kubernetes基础:Secret

一、账号及密码base64加密

$ echo -n "aming"|base64
$ echo -n "linux123"|base64

二、定义YAML

$ vi  mysecret.yaml

apiVersion: v1
kind: Secret
metadata:
  name: mysecret

data:
  user: YW1pbmc=   ## echo -n "aming"|base64
  passwd: bGludXgxMjM=  ## echo -n "linux123"|base64

三、查看

$ k apply -f mysecret.yaml
$ k get secret
$ k describe secret mysecret

四、在其它pod里引用Secret

$ vi testpod2.yaml

apiVersion: v1
kind: Pod
metadata:
  name: testpod2

spec:
  containers:
  - image: registry.cn-hangzhou.aliyuncs.com/abroad_images/busybox:latest
    name: busy
    imagePullPolicy: IfNotPresent
    command: ["/bin/sleep", "300"]

    env:
      - name: USERNAME
        valueFrom:
          secretKeyRef:
            name: mysecret
            key: user
      - name: PASSWORD
        valueFrom:
          secretKeyRef:
            name: mysecret
            key: passwd

应用YAML

$ k apply -f testpod2.yaml

五、验证

$ k exec -it testpod2 -- sh
/ # echo $PASSWORD
linux123

六、恢复

$ k delete -f testpod2.yaml
$ k delete -f mysecret.yaml
© 版权声明
THE END
喜欢就支持一下吧
点赞6 分享
评论 抢沙发

请登录后发表评论

    暂无评论内容